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damages caused by the use of this translation. 

1. This document has been translated by computer.So the translation may not reflect the original 
precisely. 

2 **** s hows the word which can not be translated. 
3. In the drawings, any words are not translated. 



CLAIMS 



[Claim(s)] 

[Claim 1] They are the negotiable securities carry the IC chip carry out having the storage which stores 
the rewritable information which the bill which carries IC chip which can be written by non-contact, a 
gift certificate, a stock certificate, debentures, etc. are valuable securities, and shows whether the 
aforementioned IC chip can use the aforementioned securities for operating processing, and the program 
which can perform within the aforementioned IC chip which answers a demand from the outside and 
changes the aforementioned information as the feature. 

[Claim 2] The bill which carries IC chip which can be written by non-contact, a gift certificate, a stock 
certificate, a debenture, etc. are the valuable unjust use prevention methods of securities, the 
aforementioned IC chip Rewritable lock/unlocking information which shows whether the 
aforementioned securities can be used for operating processing, Answer a demand from the outside and 
it has the storage which stores reference of the aforementioned lock/unlocking information, and the 
program which can be performed within the aforementioned IC chip which performs updating. It orders 
so that use of the aforementioned securities may be forbidden and the aforementioned lock/unlocking 
information may be set as the aforementioned IC chip by the external computer at a lock state. It orders 
so that use of the aforementioned securities may be enabled and the aforementioned lock/unlocking 
information may be set as the aforementioned IC chip by the external computer at an unlocking state. 
The unjust use prevention method of the negotiable securities which carry IC chip characterized by 
starting operating processing by the external computer with reference to the aforementioned 
lock/unlocking information on the aforementioned IC chip when the aforementioned lock/unlocking 
information is in an unlocking state. 

[Claim 3] The computer of the aforementioned exterior which updates the aforementioned 
lock/unlocking information Save the 1st key information at the storage, and the aforementioned IC chip 
saves the 2nd key information which becomes the 1 st key information and a pair to the storage. When it 
attests that the 1st key information and the 2nd key information have a predetermined correspondence 
relation between the computers of the aforementioned exterior and the aforementioned IC chips which 
update the aforementioned lock/unlocking information, The unjust use prevention method of the 
negotiable securities which carry IC chip according to claim 2 characterized by updating the 
aforementioned lock/unlocking information with the aforementioned IC chip. 
[Claim 4] Valuable securities, such as a bill which is characterized by providing the following and 
which carries IC chip which can be written by non-contact, a gift certificate, a stock certificate, and a 
debenture The aforementioned IC chip is rewritable lock/unlocking information which shows whether 
the aforementioned securities can be used for operating processing. The negotiable securities which have 
the storage which stores the program which can be performed within the aforementioned IC chip which 
answers a demand from the outside and performs reference of the aforementioned lock/unlocking 
information, and updating The administrative computer which it is ordered so that the aforementioned 
lock/unlocking information may be updated to the aforementioned IC chip. The computer for operating 
processing which requires of the aforementioned IC chip, and starts operating processing with reference 
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to the aforementioned lock/unlocking information when the aforementioned lock/unlocking information 
is in an unlocking state. 

[Claim 5] The aforementioned administrative computer which updates the aforementioned 
lock/unlocking information Save the 1st key information at the storage, and the aforementioned IC chip 
saves the 2nd key information which becomes the 1 st key information and a pair to the storage. When it 
attests that the 1st key information and the 2nd key information have a predetermined correspondence 
relation between the aforementioned administrative computers and the aforementioned IC chips which 
update the aforementioned lock/unlocking information, The unjust use prevention system of the 
negotiable securities which carry IC chip according to claim 4 characterized by the aforementioned IC 
chip updating the aforementioned lock/unlocking information. 



[Translation done.] 
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DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[The technical field to which invention belongs] this invention relates to the securities set as the 
handling objects, such as finance / service / transportation business, and the unjust use prevention 
method of those. The negotiable securities which have some value, such as a bill, a gift certificate, a 
stock certificate, a debenture, a note, and a check, especially In case it keeps (it is only hereafter called 
securities) and carries, it changes into a state [ that the securities unjustly acquired by the theft etc. 
cannot be used ], or it applies to the unjust use prevention system proving the effectiveness of the 
securities which came to hand regularly, and is related with effective technology. 
[0002] 

[Description of the Prior Art] The securities showing the right which has various value as it is as 
promising payment of money **** [„ and ] are circulating in the world. [ carrying out payment of 
transactions conventionally ] [ exchanging goods ] [ financing incorporated company ] [ promising 
payment of OK and price by a third person to the business fund ] 

[0003] Although a safe, a trunk, etc. which a physical key requires are locked, or it stations a guard in 
order to prevent a theft in keeping these securities temporarily or carrying them, it does not carry out 
adding a certain processing to especially securities, but the present condition is in the state which can be 
used as it is. 

[0004] In addition, since the uninhabited ATM/CD terminal put on the street may be destroyed in recent 
years using a heavy industrial machine called a power shovel etc. and the cash currently kept may be 
squeezed, when malfeasances, such as destruction, are committed to a ATM/CD terminal, there is 
technology of describing the fact which sprayed ink on the bill and suited the theft. 
[0005] 

[Problem(s) to be Solved by the Invention] There are the following problems in this conventional 
method. That is, the securities which once suited the theft are in the state where what is used regularly, 
and distinction do not stick, it is used unjustly, or marks, such as ink, are attached, and it has the 
problem that it is not reusable even if a just owner can recover. Moreover, it may not be certainly 
attached to the total of the securities out of which ink is squeezed. 

[0006] It is in offering the securities which can be reused when the purpose of this invention solves the 
above-mentioned problem, and the unjust use of securities by which the theft was carried out is 
prevented or it recovers to regular management origin, and the unjust use prevention method of those. 
[0007] 

[Means for Solving the Problem] this invention makes it identifiable whether it is what may be used as 
what could not read the information on IC chip carried in securities about the securities kept or 
conveyed, and could not use as what was squeezed unjustly, or was transferred regularly. 
[0008] In this invention, in order to discriminate the propriety of use of securities, it carries out by 
registering the identification information of use propriety into IC chip carried in securities. Recent years 
come and development of IC chip (RFID) of the non-contact communication formula of several mm (2- 



http://www4.ipdl.jpo.go.jp/cgi-bin/tran_web cgi ejje 



8/26/2003 



Page 2 of 7 



3mm) angle has been announced for size by the newspaper etc. If such detailed IC chip manufacturing 
technologies progress further, IC chip with which a bill, negotiable securities, etc. can be equipped will 
appear, every one sheet of the securities as used in the field of [ this invention / thin media, such as such 
papers, / detailed IC chip ] this invention — carrying — the securities concerned - the information on 
each effectiveness is given and it makes it possible to read and discriminate those information 
[0009] It is possible per management of the corporation or place of business which manages 
storage/conveyance, and, as for the R/W to IC chip carried in securities, the security about the writing of 
the information on IC chip also manages the securities concerned. Therefore, when the others squeeze 
the securities which regular management origin keeps or carries, By showing that it is in a state [ that the 
information on IC chip carried in the securities concerned cannot use ], and reading this information to 
the utilization time of securities It becomes possible by being able to discriminate that the securities 
concerned are squeezed unjustly and refusing to use these in this state to prevent unjust use. In case 
reading of the information on IC chip carried in securities uses securities for operating processing, it 
enables it to read it by IC chip reader. 

[0010] The writing of the information on IC chip carried in securities enables it for the control 
information for security (a personal identification number, cryptographic key, etc.) to, perform only the 
administrative computer holding such control information on the other hand, and the third person who 
does not know control information prevents from rewriting the information on IC chip. 
[001 1] Moreover, new management origin can change to the control information to manage by 
canceling a rewriting limit of control information using the control information which old management 
origin had set up so that it may change into original control information required in order that new 
management origin may rewrite the information on IC chip carried in the securities it is incomparable 
for the candidate for transfer, in transferring regularly the management of the securities which a certain 
management origin manages to another management origin. In this way, new management origin can 
rewrite now the information on IC chip carried in securities using the security control information under 
its management if needed. 

[0012] Therefore, if the securities once squeezed unjustly can be returned to management origin with the 
just security control information which can rewrite the information on the original IC chip, it can be 
returned to the state where the information on IC chip of securities which was use improper can be used, 
and can be reused satisfactory. 

[0013] Since the information on the use propriety of securities can be certainly written as mentioned 
above about the management unit total which carried IC chip by non-contact communication according 
to the securities and the unjust use prevention method of those of this invention, if the squeezed 
securities can be discriminated, the unjust use can be prevented and it returns to a still more regular 
owner's hand, returning to the state which can be used again is also possible. 
[0014] 

[Embodiments of the Invention] Unjust use prevention of securities is explained using a drawing about 
the operation form made possible below. 

[0015] Drawing 1 is drawing showing the outline composition of this operation form. Securities 103 are 
equipped with the detailed IC chip 104. Securities 103 are equipped with the IC chip 104 by the method 
of pasting up the seal which became empty among two sheets of papers which constitute securities 103, 
or enclosed the IC chip 104 on securities 103. Anyway, securities 103 are equipped with the IC chip 104 
by the method which cannot pull apart the IC chip 104 from securities 103, without damaging so that 
securities 103 are made unusable. The lock information 51 1, the lock key freeze information 512, and a 
lock key 513 are recorded on the storage in the IC chip 104. The lock information 5 1 1 has the state of a 
lock state or an unlocking state. A lock state is in the state where securities 103 cannot be used because 
of operating processing, and an unlocking state is in the state where securities 103 can be used because 
of operating processing. A lock key 513 is a bit string used as keys (a password, cryptographic key, etc.) 
required in order to change the lock information 51 1, the lock key freeze information 512, and lock key 
513 the very thing. The lock key freeze information 512 has the state of a lock key freeze state or a lock 
key freeze release state. A lock key freeze state is in the state which cannot freeze and update a lock key 
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513, and a lock key freeze release state is in the state which can update a lock key 513. 
[0016] The management server 101 has the authority to update the lock information 511, the lock key 
freeze information 512, and a lock key 513, is a computer which manages a lock key 513, and connects 
IC chip reading and write-in equipment 307. The management server 101 reads the information on the 
IC chip 104 carried in securities 103 through IC chip reading and write-in equipment 307 by non- 
contact, and performs change of the lock information 511, change of the lock key freeze information 
512, and renewal of a lock key 513. 

[0017] The operating server 105 is a computer which performs operating processing about securities 
103, and connects IC chip reader 407. The operating server 105 accesses the lock information 511 on the 
IC chip 104 of securities 103 through IC chip reader 407, if the lock information 511 is in an unlocking 
state, it will perform operating processing which deals with securities 103, and if it is in a lock state, it 
will not perform operating processing. 

[0018] Drawing 2 is drawing explaining the example of the procedure of using the securities 103 
equipped with the IC chip 104. The securities 103 equipped with the IC chip 104 shall be the securities 
103 which entered from the manufacture process of securities 103, it shall be used first, and shall be 
managed by other management servers, or shall go into the bottom of management of the management 
server 101 concerned first, and the lock information 511 shall be in a lock state and the state of a lock 
key freeze of the lock key freeze information 512. 

[0019] Drawing 2 (a) is a step updated to the lock key to which the management server 101 carries out 
lock key freeze release of the lock key freeze information 512 about the IC chip 104 on securities 103, 
and he manages a lock key 513. Drawing 2 (b) is a step at which the management server 101 changes 
the lock information 511 into a lock state about the IC chip 104 on securities 103, and changes the lock 
key freeze information 512 into the state of a lock key freeze. Drawing 2 (c) shows the step which keeps 
or carries the securities 103 of this state. The securities 103 of this state cannot be used for operating 
processing. Moreover, a lock key 513 cannot be unfairly updated to the lock key under its management 
by other management servers. 

[0020] Drawing 2 (d) is a step at which the management server 101 changes the lock information 511 
into the state of unlocking about the IC chip 104 on securities 103, in order to use these securities 103 
for operating processing. In drawing 2 (e), the operating server 105 accesses the lock information 51 1 on 
the IC chip 104 on securities 103, and checks the propriety of use. If the lock information 511 is in an 
unlocking state, the operating processing about these securities 103 will be started, and if the lock 
information 511 is in a lock state, operating processing about these securities 103 will not be performed. 
Therefore, operating processing of the securities 103 which met the theft etc. during storage or 
conveyance is not carried out. 

[0021] It is transferred to another financial institution from the financial institution which has securities 
1 03 as moving from under management of the management server which has the above-mentioned 
securities 103 to the bottom of management of another management server, or the case where it is 
transferred between places of business is assumed. Therefore, as long as the problem of security does 
not arise, unlocking and the lock key freeze information 512 may transfer [ the lock information 51 1 on 
the IC chip 104 ] securities 103 between places of business in the state of lock key freeze release. 
[0022] Drawing 3 is drawing showing the outline composition of the management server 101. As shown 
in drawing 3 , the management server 101 has CPU301, memory 302, a magnetic disk unit 303, 
keyboard equipment 304, a display unit 305, CD-ROM equipment 306, and IC chip reading and write-in 
equipment 307. The magnetic disk unit 303 stores the lock key managed table 308. The whole 
management server 101 may be a pocket information processor. 

[0023] CPU301 is equipment which controls operation of the management server 101 whole. Memory 
302 is storage which stores various processing programs and data. A magnetic disk unit 303 is storage 
which stores various processing programs and data. Keyboard equipment 304 is equipment for a data 
input, and a display unit 305 is equipment which displays various data. CD-ROM equipment 306 is 
equipment which reads the contents of CD-ROM which recorded various processing programs. IC chip 
reading and write-in equipment 307 are equipment which write information by non-contact between the 
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IC chips 104 carried in securities 103. 

[0024] The lock key managed table 308 is a table which stores the lock key which the management 
server 101 concerned manages. 

[0025] A lock / lock key processing section 310 is stored in memory 302, as shown in drawing 2 , it is a 
program which performs processing concerning management of the lock information 511 recorded on 
the IC chip 104 of securities 103, the lock key freeze information 512, and a lock key 513, and it is 
performed by CPU301 . 

[0026] After storing in magnetic-disk-unit 303 grade the lock / lock key processing section 310 recorded 
on record media, such as CD-ROM, it shall load to memory 302 and shall perform. In addition, other 
record media other than CD-ROM may be used as a record medium which records this program. 
[0027] Drawing 4 is drawing showing the outline composition of the operating server 105. As shown in 
drawing 4 , the operating server 105 has CPU401, memory 402, a magnetic disk unit 403, keyboard 
equipment 404, a display unit 405, CD-ROM equipment 406, and IC chip reader 407. 
[0028] CPU401 is equipment which controls operation of the operating server 105 whole. Memory 402 
is storage which stores various processing programs and data. A magnetic disk unit 403 is storage which 
stores various processing programs and data. IC chip reader 407 is equipment which reads the lock 
information 51 1 in the IC chip 104 carried in securities 103 by non-contact. 

[0029] Memory 402 stores the lock judging processing section 410 and the operating processing section 
41 1. The lock judging processing section 410 is a program which performs processing which reads the 
lock information 51 1 on the IC chip 104 carried in securities 103, and judges the propriety of use of the 
securities 103 concerned. It is the processing section which processes operating application about the 
securities 103 judged that the operating processing section 41 1 can be used. 

[0030] After storing in magnetic-disk-unit 403 grade the program containing the lock judging processing 
section 410 recorded on record media, such as CD-ROM, it shall load to memory and shall perform. In 
addition, other record media other than CD-ROM may be used as a record medium which records this 
program. 

[0031] Drawing 5 is drawing showing the internal configuration of the IC chip 104 carried in securities 
103. The IC chip 104 is a detailed semiconductor chip, and as shown in drawing 5 , it has the 
communication antenna 501, electromagnetic-induction electromotive equipment 502, power 
accumulation equipment 503, a control unit 504, and storage 505. 

[0032] The communication antenna 501 is equipment which transmits and receives information between 
the IC chip 104, IC chip reading and write-in equipment 307, or IC chip reader 407, or receives the 
electromagnetic wave for the electric power supply used as the power supply which drives the IC chip 
104 from IC chip reading and write-in equipment 307, or IC chip reader 407. Electromagnetic-induction 
electromotive equipment 502 is equipment which transforms into power the electromagnetic wave 
received with the communication antenna 501 by electromagnetic induction. Power accumulation 
equipment 503 is equipment used as the power supply for accumulating the power which carried out 
electromotive with electromagnetic-induction electromotive equipment 502, and driving the IC chip 
104. 

[0033] A control unit 504 is equipment which controls operation of the IC chip 104 whole including a 
microprocessor. Storage 505 stores various programs, such as the lock information 511, the lock key 
freeze information 512 and management information of a lock key 513, the code decode program 521 
and the lock key right-or- wrong judging program 522, the renewal program 523 of lock state reference, 
and the renewal program 524 of a lock key. 

[0034] The lock information 511 stores the 1-bit information which shows the state of a lock/unlocking. 
The lock key freeze information 512 stores the 1-bit information which shows a lock key freeze / lock 
key freeze release. A lock key 513 is information managed as a key given to the IC chip 104 concerned. 
[0035] Drawing 6 is drawing explaining the state transition of the lock information 511 recorded on the 
IC chip 104, and the lock key freeze information 512. The state of the lock information 511 and the lock 
key freeze information 512 has three, the state 601 of a lock and a lock key freeze, the state 602 of 
unlocking and a lock key freeze, and the state 603 of unlocking and lock key freeze release. 
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[0036] A state 601 is in the state which cannot use the securities 103 concerned and cannot update a lock 
key 513. It can change in the state 602 from a state 601 by using the right lock key. 
[0037] A state 602 can use the securities 103 concerned, and is in the state which cannot update a lock 
key 513. It can change in the state 603 from a state 602 by using the right lock key. Moreover, it can 
change in the state 601 from a state 602 by using the right lock key. 

[0038] A state 603 can use the securities 103 concerned, and is in the state which can update a lock key 
513. It can change in the state 602 from a state 603 by using the right lock key. 

[0039] Drawing 7 A and drawing 7 B are flow charts which show the flow of processing of the lock / 
lock key processing section 310 of the management server 101. A lock / lock key processing section 310 
receives the demand inputted from the keyboard etc. about the target securities 103 (Step 701). a 
demand is shown below — there are four kinds (1) Change into a lock state the lock information 51 1 on 
the IC chip 104 carried in the securities 103 concerned from an unlocking state. (2) Change the lock 
information 511 into an unlocking state from a lock state. Whether the lock key freeze information 512 
is changed into a lock key freeze state or it changes into the state of lock key freeze release need to be 
specified of this demand. (3) Update a lock key 513 after changing an unlocking state and the lock key 
freeze information 512 into a lock key freeze release state for the lock information 5 1 1 . (4) Change a 
lock state and the lock key freeze information 512 into a lock key freeze state for the lock information 

511 after updating a lock key 513. 

[0040] Next, a lock / lock key processing section 310 judges whether the lock key registered into the 
lock key or the lock key managed table 308 which is the lock key which received the notice from old 
management origin, and was inputted from the keyboard 304 etc., and the lock key 513 on the IC chip 
104 are in agreement in whether a lock key 513 is right (Step 702). Since the lock key 513 is not 
updated yet here, it will collate about the lock key before renewal of a lock key, and the lock key is 
either of the lock keys which received the notice from the lock key which the management server 101 
concerned manages, or other management places of business. If a lock key 513 is not right (Step 702, 
error), it considers as a processing end. 

[0041] If a lock key 513 is right, unlocking processing which changes the lock information 511 on the 
IC chip 104 concerned into an unlocking state will be performed (Step 703). Next, if renewal of a lock 
key is not demanded (Step 704), it goes to Step 709. When renewal of a lock key is demanded, it judges 
whether a lock key 513 is right (Step 705). Here, the check of Step 702 will be repeated and it is judged 
with a lock key 513 being right. Next, the lock key freeze information 512 is read, and if it is in a lock 
key freeze state (Step 706, freeze), this will be changed into the state of lock key freeze release (Step 
707). Next, with reference to the lock key managed table 308, the lock key 513 on the IC chip 104 is 
updated to the new lock key under management of the management server 101 (Step 708). 
[0042] Next, it moves to drawing 7 B and judges whether a lock / lock key processing section 310 
freezes a lock key (Step 709). When specification of a lock key freeze is carried out by a demand (1), 
(4), and (2), the freeze of a lock key is required. In not carrying out a lock key freeze, it goes to Step 
712. Next, it judges whether a lock key 513 is right (Step 710). When renewal of a lock key of Step 708 
is carried out, coincidence with the lock key on the lock key managed table 308 and the lock key 513 
after updating is judged, and it is judged with naturally a lock key 513 being right. When renewal of a 
lock key of Step 708 has not been carried out, the check of Step 702 will be repeated and it is judged 
with a lock key 513 being right, if a lock key is right (Step 710 » right), the lock key freeze information 

512 will be changed into a lock key freeze state (Step 711) 

[0043] Next, it judges whether a lock / lock key processing section 310 changes the lock information 

511 into a lock state (Step 712). It is necessary to change the lock information 511 into a lock state about 
a demand (1) and (4). In locking (Step 712), it judges whether a lock key 513 is right again (Step 713). 
The check of Step 702 and Step 710 will be repeated at a demand (1) and the case of (4), and it is judged 
with a lock key 513 being right, if a lock key is right (Step 713 — right), the lock key freeze information 

512 is in the state of a freeze (Step 714, freeze), and when the lock information 5 1 1 is in an unlocking 
state, (Step 715, unlocking), and lock processing that changes the lock information 511 into a lock state 
will be performed (Step 716) 
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[0044] When the lock key freeze information 512 which is contradictory to the judgment of Step 709 at 
Step 714 when there is an error of a lock key at Step 710, it does not lock at Step 712 and there is an 
error of a lock key at Step 713 is in a lock key freeze release state, and when the lock information 51 1 is 
in a lock state at Step 715, it considers as a processing end immediately. 

[0045] Although the check with a right lock key 5 1 3 was based on the judgment with the lock key which 
suited under another management or the lock key on the lock key managed table 308, and the lock key 
513 in agreement on the IC chip 104 with the above-mentioned operation gestalt If a lock key with a 
plaintext is transmitted to the IC chip 104 or a lock key with a plaintext is transmitted to it from the IC 
chip 104 through IC chip reading and write-in equipment 307 to the management server 101 from the 
management server 101, the danger that security will be broken will become high. For example, if the 
electromagnetic wave sent out from IC chip reading and write-in equipment 307 is intercepted, the lock 
key transmitted between the management server 101 and the IC chip 104 can be known. In order to 
avoid such risk, it is desirable to transmit the numeric value which made the lock key the cryptographic 
key, without transmitting a direct lock key, and was enciphered by the lock key. For example, the 
random number which enciphered the random number which used as the public key the lock key 
registered into the lock key managed table 308, and a lock / lock key processing section 310 made 
generate a random number, and was generated with this public key, and was enciphered, and the original 
random number are transmitted to the IC chip 104. The lock key right-or-wrong judging program 522 of 
the IC chip 104 When the command of a lock key right-or- wrong judging is received, the random 
number with which the code decode program 521 was enciphered by the lock key 513 saved as a private 
key is decoded. It is able for the lock key right-or- wrong judging program 522 to compare with the 
original random number the random number by which decode was carried out, to judge the right or 
wrong of a lock key, and to notify the result (positive or no) to the lock / lock key processing section 
310 of the management server 101. In this case, the lock key which suited under another management or 
the lock key on the lock key managed table 308, and the lock key 513 on the IC chip 104 have the 
correspondence relation of a public key pair, and, generally the same value does not become. Therefore, 
the lock key which can generally creep and is under that management, and the lock key 513 on the IC 
chip 104 do not need to be the same values, and should just be the numeric value which had a 
predetermined correspondence relation. 

[0046] finishing [ the renewal program 523 of lock state reference on the IC chip 104 / a judgment of the 
right or wrong of a lock key ] when the command which requires reference of the lock information 511 
is received from the management server 101 or the operating server 105 — it is — it is not involved 
nothing but transmits to content of lock information 511 demand-origin However, this demand will not 
be answered if it is not after judging if a lock key is right by the lock key right-or-wrong judging 
program 522, when the command which requires renewal of the lock information 51 1 is received. 
Moreover, if the renewal program 523 of lock state reference is not after judging if a lock key is right by 
the lock key right-or-wrong judging program 522, when the command which requires the reference or 
updating of the lock key freeze information 512 is received, it will not answer this demand. 
[0047] Similarly, if the renewal program 524 of a lock key on the IC chip 104 is not after judging if a 
lock key is right by the lock key right-or-wrong judging program 522, when the command which 
requires renewal of a lock key 513 is received, it will not answer this demand. In using a public key pair 
as a lock key, after transmitting the updating demand command of a lock key 513 to the IC chip 104 and 
obtaining a response, a lock / lock key processing section 310 enciphers the lock key after updating 
(private key) by the old lock key (public key), and transmits to the IC chip 104. The renewal program 
524 of a lock key is decoded by the old lock key (private key) in which the encryption information 
received through the code decode program 521 is stored by the lock key 513, and transposes a lock key 
513 to the new lock key (private key) by which decode was carried out. In using a common key instead 
of a public key pair as a lock key, a lock / lock key processing section 310 enciphers a new lock key 
(common key) by the old lock key (common key) similarly, it transmits to the IC chip 104, the 
encryption information which the renewal program 524 of a lock key received is decoded by the old 
lock key (common key), and it transposes to the lock key which was able to obtain the lock key 513. 
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[0048] The lock key right-or- wrong judging program 522 has a lock key right-or- wrong judging flag on 
storage 505, and saves the result (positive or no) of a right-or- wrong judging of a lock key. And this lock 
key right-or- wrong judging flag is reset to an initial state (no) at the time of each processing end of 
processing (unlocking processing) of Step 703, processing (renewal of a lock key) of Step 708, 
processing (freezing treatment of a lock key) of Step 711, and processing (lock processing) of Step 716. 
In any [ of demand (1) - (4) ] case, this flag is reset by the state of no by such composition at the time of 
a processing end. 

[0049] In addition, although the lock key freeze information 512 was formed in the IC chip 104, and 
updating of a lock key 5 1 3 was enabled with the above-mentioned operation form only when the lock 
key freeze information 512 was in a lock key freeze release state, the lock key freeze information 512 is 
not established, but when a lock key is right irrespective of the state of the lock information 511, this 
invention can be carried out also in the form which degenerated so that lock key 513 updating might 
always be enabled. In this case, a demand becomes three kinds of (1) and (2), (3), or (4), and processing 
of Steps 706, 707,709,710,711, and 714 is excepted. 

[0050] Moreover, an identification number (ID) like the serial number of the IC chip 104 concerned may 
be given to the storage 505 of the IC chip 104, the correspondence table of this ID and lock key may be 
prepared in the lock key managed table 308, and the securities 103 which carried the IC chip 104 by the 
pair of ID and a lock key may be managed. Moreover, if it is used in order to only call the IC chip 104 
theft prevention under storage or transportation, the management server 101 is able to give and manage 
the same lock key for the IC chip 104 of all the securities 103 put under management. Only as for the 
management server 101 concerned, the securities 103 which carry the IC chip 104 set in the lock state 
recovered from the theft etc. change into the state of unlocking. 

[0051] Or if the value which shows the invalid of the lock key 513 beforehand specified specially to the 
lock information 51 1 on the IC chip 104 as a modification about the above-mentioned operation form is 
set up and it will be made the structure which cannot return to an unlocking state eternally, electronic 
abandonment processing can be given to the securities of this invention the same with carrying out 
decision (abandonment) processing so that the reuse of the gift certificate after use cannot be carried out, 
for example etc. 

[0052] What is necessary is just to opt for the function of the program which is the balance of the 
required grade of security, and the cost of the IC chip 104, and stores in the hardware of the IC chip 104, 
and the IC chip 104, and the IC chip 104 performs since various deformation can be performed in 
operation of this invention like described above. 

[0053] It is possible to judge from the information on IC chip carried in the securities concerned, to 
perform operating processing justly or to prevent unjust use as mentioned above, without an operating 
server asking a management server the propriety of the execution of operating processing to the 
securities concerned by the online network etc. with this operation form. Moreover, the method of this 
invention is applied, and the reuse can be enabled when the once squeezed securities which cannot be 
used are able to be regained under management of a just management server. 

[0054] Since the propriety of use of the securities concerned can be judged using the information on IC 
chip carried in securities according to this operation form as explained above, it is possible to 
discriminate on that spot whether they are the securities squeezed unjustly, and to prevent unjust use. 
[0055] 

[Effect of the Invention] It is possible to return to the state which can be reused when unjust use can be 
prevented and it is able to return to just management origin, since the securities unjustly squeezed using 
the information on IC chip carried in securities were discriminable according to this invention. 
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* NOTICES * 

Japan Patent Office is not responsible for any 
damages caused by the use of this translation. 

1. This document has been translated by computer.So the translation may not reflect the original 
precisely. 

2 **** s hows the word which can not be translated. 
3. In the drawings, any words are not translated. 



TECHNICAL FIELD 



[The technical field to which invention belongs] This inventions are negotiable securities which have 
some value, such as a bill, a gift certificate, a stock certificate, a debenture, a note, and a check, 
especially with respect to the securities set as the handling objects, such as finance / service / 
transportation business, and the unjust use prevention method of those. In case it keeps (it is only 
hereafter called securities) and carries, it changes into a state [ that the securities unjustly acquired by the 
theft etc. cannot be used ], or it applies to the unjust use prevention system proving the effectiveness of 
the securities which came to hand regularly, and is related with effective technology. 
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PRIOR ART 



[Description of the Prior Art] The securities showing the right which has various value as it is as 
promising payment of money **** [ M and ] are circulating in the world. [ carrying out payment of 
transactions conventionally ] [ exchanging goods ] [ financing incorporated company ] [ promising 
payment of OK and price by a third person to the business fund ] 

[0003] Although a safe, a trunk, etc. which a physical key requires are locked, or it stations a guard in 
order to prevent a theft in keeping these securities temporarily or carrying them, it does not carry out 
adding a certain processing to especially securities, but the present condition is in the state which can be 
used as it is. 

[0004] In addition, since the uninhabited ATM/CD terminal put on the street may be destroyed in recent 
years using a heavy industrial machine called a power shovel etc. and the cash currently kept may be 
squeezed, when malfeasances, such as destruction, are committed to a ATM/CD terminal, there is 
technology of describing the fact which sprayed ink on the bill and suited the theft. 
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EFFECT OF THE INVENTION 



[Effect of the Invention] It is possible to return to the state which can be reused when unjust use can be 
prevented and it is able to return to just management origin, since the securities unjustly squeezed using 
the information on IC chip carried in securities were discriminable according to this invention. 
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TECHNICAL PROBLEM 



[Problem(s) to be Solved by the Invention] There are the following problems in this conventional 
method. That is, the securities which once suited the theft are in the state where what is used regularly, 
and distinction do not stick, it is used unjustly, or marks, such as ink, are attached, and it has the 
problem that it is not reusable even if a just owner can recover. Moreover, it may not be certainly 
attached to the total of the securities out of which ink is squeezed. 

[0006] It is in offering the securities which can be reused when the purpose of this invention solves the 
above-mentioned problem, and the unjust use of securities by which the theft was carried out is 
prevented or it recovers to regular management origin, and the unjust use prevention method of those. 
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MEANS 



[Means for Solving the Problem] this invention makes it identifiable whether it is what may be used as 
what could not read the information on IC chip carried in securities about the securities kept or 
conveyed, and could not use as what was squeezed unjustly, or was transferred regularly. 
[0008] In this invention, in order to discriminate the propriety of use of securities, it carries out by 
registering the identification information of use propriety into IC chip carried in securities. Recent years 
come and development of IC chip (RFID) of the non-contact communication formula of several mm (2- 
3mm) angle has been announced for size by the newspaper etc. If such detailed IC chip manufacturing 
technologies progress further, IC chip with which a bill, negotiable securities, etc. can be equipped will 
appear, every one sheet of the securities as used in the field of [ this invention / thin media, such as such 
papers, / detailed IC chip ] this invention — carrying ~ the securities concerned ~ the information on 
each effectiveness is given and it makes it possible to read and discriminate those information 
[0009] It is possible per management of the corporation or place of business which manages 
storage/conveyance, and, as for the R/W to IC chip carried in securities, the security about the writing of 
the information on IC chip also manages the securities concerned. Therefore, when the others squeeze 
the securities which regular management origin keeps or carries, By showing that it is in a state [ that the 
information on IC chip carried in the securities concerned cannot use ], and reading this information to 
the utilization time of securities It becomes possible by being able to discriminate that the securities 
concerned are squeezed unjustly and refusing to use these in this state to prevent unjust use. In case 
reading of the information on IC chip carried in securities uses securities for operating processing, it 
enables it to read it by IC chip reader. 

[0010] The writing of the information on IC chip carried in securities enables it for the control 
information for security (a personal identification number, cryptographic key, etc.) to, perform only the 
administrative computer holding such control information on the other hand, and the third person who 
does not know control information prevents from rewriting the information on IC chip. 
[001 1] Moreover, new management origin can change to the control information to manage by 
canceling a rewriting limit of control information using the control information which old management 
origin had set up so that it may change into original control information required in order that new 
management origin may rewrite the information on IC chip carried in the securities it is incomparable 
for the candidate for transfer, in transferring regularly the management of the securities which a certain 
management origin manages to another management origin. In this way, new management origin can 
rewrite now the information on IC chip carried in securities using the security control information under 
its management if needed. 

[0012] Therefore, if the securities once squeezed unjustly can be returned to management origin with the 
just security control information which can rewrite the information on the original IC chip, it can be 
returned to the state where the information on IC chip of securities which was use improper can be used, 
and can be reused satisfactory. 

[0013] Since the information on the use propriety of securities can be certainly written as mentioned 
above about the management unit total which carried IC chip by non-contact communication according 



http://www4.ipdl.jpo.go.jp/cgi-bin/tran_web_cgi_ejje 8/26/2003 



Page 2 of 7 



to the securities and the unjust use prevention method of those of this invention, if the squeezed 
securities can be discriminated, the unjust use can be prevented and it returns to a still more regular 
owner's hand, returning to the state which can be used again is also possible. 
[0014] 

[Embodiments of the Invention] Unjust use prevention of securities is explained using a drawing about 
the operation gestalt made possible below. 

[0015] Drawing 1 is drawing showing the outline composition of this operation gestalt. Securities 103 
are equipped with the detailed IC chip 104. Securities 103 are equipped with the IC chip 104 by the 
method of pasting up the seal which became empty among two sheets of papers which constitute 
securities 103, or enclosed the IC chip 104 on securities 103. Anyway, securities 103 are equipped with 
the IC chip 104 by the method which cannot pull apart the IC chip 104 from securities 103, without 
damaging so that securities 103 are made unusable. The lock information 511, the lock key freeze 
information 512, and a lock key 513 are recorded on the storage in the IC chip 104. The lock 
information 511 has the state of a lock state or an unlocking state. A lock state is in the state where 
securities 103 cannot be used because of operating processing, and an unlocking state is in the state 
where securities 103 can be used because of operating processing. A lock key 513 is a bit string used as 
keys (a password, cryptographic key, etc.) required in order to change the lock information 51 1, the lock 
key freeze information 512, and lock key 513 the very thing. The lock key freeze information 512 has 
the state of a lock key freeze state or a lock key freeze release state. A lock key freeze state is in the state 
which cannot freeze and update a lock key 513, and a lock key freeze release state is in the state which 
can update a lock key 513. 

[0016] The management server 101 has the authority to update the lock information 511, the lock key 
freeze information 512, and a lock key 513, is a computer which manages a lock key 513, and connects 
IC chip reading and write-in equipment 307. The management server 101 reads the information on the 
IC chip 104 carried in securities 103 through IC chip reading and write-in equipment 307 by non- 
contact, and performs change of the lock information 511, change of the lock key freeze information 
512, and renewal of a lock key 513. 

[0017] The operating server 105 is a computer which performs operating processing about securities 
103, and connects IC chip reader 407. The operating server 105 accesses the lock information 51 1 on the 
IC chip 104 of securities 103 through IC chip reader 407, if the lock information 511 is in an unlocking 
state, it will perform operating processing which deals with securities 103, and if it is in a lock state, it 
will not perform operating processing. 

[0018] Drawing 2 is drawing explaining the example of the procedure of using the securities 103 
equipped with the IC chip 104. The securities 103 equipped with the IC chip 104 shall be the securities 
103 which entered from the manufacture process of securities 103, it shall be used first, and shall be 
managed by other management servers, or shall go into the bottom of management of the management 
server 101 concerned first, and the lock information 511 shall be in a lock state and the state of a lock 
key freeze of the lock key freeze information 512. 

[0019] Drawing 2 (a) is a step updated to the lock key to which the management server 101 carries out 
lock key freeze release of the lock key freeze information 512 about the IC chip 104 on securities 103, 
and he manages a lock key 513. Drawing 2 (b) is a step at which the management server 101 changes 
the lock information 511 into a lock state about the IC chip 104 on securities 103, and changes the lock 
key freeze information 5 1 2 into the state of a lock key freeze. Drawing 2 (c) shows the step which keeps 
or carries the securities 103 of this state. The securities 103 of this state cannot be used for operating 
processing. Moreover, a lock key 513 cannot be unfairly updated to the lock key under its management 
by other management servers. 

[0020] Drawing 2 (d) is a step at which the management server 101 changes the lock information 511 
into the state of unlocking about the IC chip 104 on securities 103, in order to use these securities 103 
for operating processing. In drawing 2 (e), the operating server 105 accesses the lock information 51 1 on 
the IC chip 104 on securities 103, and checks the propriety of use. If the lock information 511 is in an 
unlocking state, the operating processing about these securities 103 will be started, and if the lock 
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information 511 is in a lock state, operating processing about these securities 103 will not be performed. 
Therefore, operating processing of the securities 103 which met the theft etc. during storage or 
conveyance is not carried out. 

[0021] It is transferred to another financial institution from the financial institution which has securities 
103 as moving from under management of the management server which has the above-mentioned 
securities 103 to the bottom of management of another management server, or the case where it is 
transferred between places of business is assumed. Therefore, as long as the problem of security does 
not arise, unlocking and the lock key freeze information 512 may transfer [ the lock information 51 1 on 
the IC chip 104 ] securities 103 between places of business in the state of lock key freeze release. 
[0022] Drawing 3 is drawing showing the outline composition of the management server 101. As shown 
in drawing 3 , the management server 101 has CPU301, memory 302, a magnetic disk unit 303, 
keyboard equipment 304, a display unit 305, CD-ROM equipment 306, and IC chip reading and write-in 
equipment 307. The magnetic disk unit 303 stores the lock key managed table 308. The whole 
management server 101 may be a pocket information processor. 

[0023] CPU301 is equipment which controls operation of the management server 101 whole. Memory 
302 is storage which stores various processing programs and data. A magnetic disk unit 303 is storage 
which stores various processing programs and data. Keyboard equipment 304 is equipment for a data 
input, and a display unit 305 is equipment which displays various data. CD-ROM equipment 306 is 
equipment which reads the content of CD-ROM which recorded various processing programs. IC chip 
reading and write-in equipment 307 are equipment which write information by non-contact between the 
IC chips 104 carried in securities 103. 

[0024] The lock key managed table 308 is a table which stores the lock key which the management 
server 101 concerned manages. 

[0025] A lock / lock key processing section 310 is stored in memory 302, as shown in drawing 2 , it is a 
program which performs processing concerning management of the lock information 511 recorded on 
the IC chip 104 of securities 103, the lock key freeze information 512, and a lock key 513, and it is 
performed by CPU301 . 

[0026] After storing in magnetic-disk-unit 303 grade the lock / lock key processing section 310 recorded 
on record media, such as CD-ROM, it shall load to memory 302 and shall perform. In addition, other 
record media other than CD-ROM may be used as a record medium which records this program. 
[0027] Drawing 4 is drawing showing the outline composition of the operating server 105. As shown in 
drawing 4 , the operating server 105 has CPU401, memory 402, a magnetic disk unit 403, keyboard 
equipment 404, a display unit 405, CD-ROM equipment 406, and IC chip reader 407. 
[0028] CPU401 is equipment which controls operation of the operating server 105 whole. Memory 402 
is storage which stores various processing programs and data. A magnetic disk unit 403 is storage which 
stores various processing programs and data. IC chip reader 407 is equipment which reads the lock 
information 511 in the IC chip 104 carried in securities 103 by non-contact. 

[0029] Memory 402 stores the lock judging processing section 410 and the operating processing section 
411. The lock judging processing section 410 is a program which performs processing which reads the 
lock information 5 1 1 on the IC chip 104 carried in securities 103, and judges the propriety of use of the 
securities 103 concerned. It is the processing section which processes operating application about the 
securities 103 judged that the operating processing section 41 1 can be used. 

[0030] After storing in magnetic-disk-unit 403 grade the program containing the lock judging processing 
section 410 recorded on record media, such as CD-ROM, it shall load to memory and shall perform. In 
addition, other record media other than CD-ROM may be used as a record medium which records this 
program. 

[0031] Drawing 5 is drawing showing the internal configuration of the IC chip 104 carried in securities 
103. The IC chip 104 is a detailed semiconductor chip, and as shown in drawing 5 , it has the 
communication antenna 501, electromagnetic-induction electromotive equipment 502, power 
accumulation equipment 503, a control unit 504, and storage 505. 

[0032] The communication antenna 501 is equipment which transmits and receives information between 
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the IC chip 104, IC chip reading and write-in equipment 307, or IC chip reader 407, or receives the 
electromagnetic wave for the electric power supply used as the power supply which drives the IC chip 
104 from IC chip reading and write-in equipment 307, or IC chip reader 407. Electromagnetic-induction 
electromotive equipment 502 is equipment which transforms into power the electromagnetic wave 
received with the communication antenna 501 by electromagnetic induction. Power accumulation 
equipment 503 is equipment used as the power supply for accumulating the power which carried out 
electromotive with electromagnetic-induction electromotive equipment 502, and driving the IC chip 
104. 

[0033] A control unit 504 is equipment which controls operation of the IC chip 104 whole including a 
microprocessor. Storage 505 stores various programs, such as the lock information 511, the lock key 
freeze information 512 and management information of a lock key 513, the code decode program 521 
and the lock key right-or- wrong judging program 522, the renewal program 523 of lock state reference, 
and the renewal program 524 of a lock key. 

[0034] The lock information 511 stores the 1 -bit information which shows the state of a lock/unlocking. 
The lock key freeze information 512 stores the 1 -bit information which shows a lock key freeze / lock 
key freeze release. A lock key 513 is information managed as a key given to the IC chip 104 concerned. 
[0035] Drawing 6 is drawing explaining the state transition of the lock information 511 recorded on the 
IC chip 104, and the lock key freeze information 512. The state of the lock information 511 and the lock 
key freeze information 512 has three, the state 601 of a lock and a lock key freeze, the state 602 of 
unlocking and a lock key freeze, and the state 603 of unlocking and lock key freeze release. 
[0036] A state 601 is in the state which cannot use the securities 103 concerned and cannot update a lock 
key 513. It can change in the state 602 from a state 601 by using the right lock key. 
[0037] A state 602 can use the securities 103 concerned, and is in the state which cannot update a lock 
key 513. It can change in the state 603 from a state 602 by using the right lock key. Moreover, it can 
change in the state 601 from a state 602 by using the right lock key. 

[0038] A state 603 can use the securities 103 concerned, and is in the state which can update a lock key 
513. It can change in the state 602 from a state 603 by using the right lock key. 

[0039] Drawing 7 A and drawing 7 B are flow charts which show the flow of processing of the lock / 
lock key processing section 310 of the management server 101. A lock / lock key processing section 310 
receives the demand inputted from the keyboard etc. about the target securities 103 (Step 701). a 
demand is shown below — there are four kinds (1) Change into a lock state the lock information 51 1 on 
the IC chip 104 carried in the securities 103 concerned from an unlocking state. (2) Change the lock 
information 511 into an unlocking state from a lock state. Whether the lock key freeze information 512 
is changed into a lock key freeze state or it changes into the state of lock key freeze release need to be 
specified of this demand. (3) Update a lock key 513 after changing an unlocking state and the lock key 
freeze information 512 into a lock key freeze release state for the lock information 511. (4) Change a 
lock state and the lock key freeze information 512 into a lock key freeze state for the lock information 
511 after updating a lock key 513. 

[0040] Next, a lock / lock key processing section 310 judges whether the lock key registered into the 
lock key or the lock key managed table 308 which is the lock key which received the notice from old 
management origin, and was inputted from the keyboard 304 etc., and the lock key 513 on the IC chip 
104 are in agreement in whether a lock key 513 is right (Step 702). Since the lock key 513 is not 
updated yet here, it will collate about the lock key before renewal of a lock key, and the lock key is 
either of the lock keys which received the notice from the lock key which the management server 101 
concerned manages, or other management places of business. If a lock key 513 is not right (Step 702, 
error), it considers as a processing end. 

[0041] If a lock key 513 is right, unlocking processing which changes the lock information 51 1 on the 
IC chip 104 concerned into an unlocking state will be performed (Step 703). Next, if renewal of a lock 
key is not demanded (Step 704), it goes to Step 709. When renewal of a lock key is demanded, it judges 
whether a lock key 513 is right (Step 705). Here, the check of Step 702 will be repeated and it is judged 
with a lock key 513 being right. Next, the lock key freeze information 512 is read, and if it is in a lock 
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key freeze state (Step 706, freeze), this will be changed into the state of lock key freeze release (Step 
707). Next, with reference to the lock key managed table 308, the lock key 513 on the IC chip 104 is 
updated to the new lock key under management of the management server 101 (Step 708). 
[0042] Next, it moves to drawing 7 B and judges whether a lock / lock key processing section 310 
freezes a lock key (Step 709). When specification of a lock key freeze is carried out by a demand (1), 
(4), and (2), the freeze of a lock key is required. In not carrying out a lock key freeze, it goes to Step 
712. Next, it judges whether a lock key 513 is right (Step 710). When renewal of a lock key of Step 708 
is carried out, coincidence with the lock key on the lock key managed table 308 and the lock key 513 
after updating is judged, and it is judged with naturally a lock key 513 being right. When renewal of a 
lock key of Step 708 has not been carried out, the check of Step 702 will be repeated and it is judged 
with a lock key 513 being right, if a lock key is right (Step 710 — right), the lock key freeze information 
512 will be changed into a lock key freeze state (Step 711) 

[0043] Next, it judges whether a lock / lock key processing section 310 changes the lock information 

511 into a lock state (Step 712). It is necessary to change the lock information 511 into a lock state about 
a demand (1) and (4). In locking (Step 712), it judges whether a lock key 513 is right again (Step 713). 
The check of Step 702 and Step 710 will be repeated at a demand (1) and the case of (4), and it is judged 
with a lock key 513 being right, if a lock key is right (Step 713 — right), the lock key freeze information 

512 is in the state of a freeze (Step 714, freeze), and when the lock information 511 is in an unlocking 
state, (Step 715, unlocking), and lock processing that changes the lock information 511 into a lock state 
will be performed (Step 716) 

[0044] When the lock key freeze information 512 which is contradictory to the judgment of Step 709 at 
Step 714 when there is an error of a lock key at Step 710, it does not lock at Step 712 and there is an 
error of a lock key at Step 713 is in a lock key freeze release state, and when the lock information 51 1 is 
in a lock state at Step 715, it considers as a processing end immediately. 

[0045] Although the check with a right lock key 513 was based on the judgment with the lock key which 
suited under another management or the lock key on the lock key managed table 308, and the lock key 

513 in agreement on the IC chip 104 with the above-mentioned operation form If a lock key with a 
plaintext is transmitted to the IC chip 104 or a lock key with a plaintext is transmitted to it from the IC 
chip 104 through IC chip reading and write-in equipment 307 to the management server 101 from the 
management server 101, the danger that security will be broken will become high. For example, if the 
electromagnetic wave sent out from IC chip reading and write-in equipment 307 is intercepted, the lock 
key transmitted between the management server 101 and the IC chip 104 can be known. In order to 
avoid such risk, it is desirable to transmit the numeric value which made the lock key the cryptographic 
key, without transmitting a direct lock key, and was enciphered by the lock key. For example, the 
random number which enciphered the random number which used as the public key the lock key 
registered into the lock key managed table 308, and a lock / lock key processing section 310 made 
generate a random number, and was generated with this public key, and was enciphered, and the original 
random number are transmitted to the IC chip 104. The lock key right-or- wrong judging program 522 of 
the IC chip 104 When the command of a lock key right-or- wrong judging is received, the random 
number with which the code decode program 52 1 was enciphered by the lock key 513 saved as a private 
key is decoded. It is able for the lock key right-or- wrong judging program 522 to compare with the 
original random number the random number by which decode was carried out, to judge the right or 
wrong of a lock key, and to notify the result (positive or no) to the lock / lock key processing section 

3 10 of the management server 101 . In this case, the lock key which suited under another management or 
the lock key on the lock key managed table 308, and the lock key 513 on the IC chip 104 have the 
correspondence relation of a public key pair, and, generally the same value does not become. Therefore, 
the lock key which can generally creep and is under that management, and the lock key 513 on the IC 
chip 104 do not need to be the same values, and should just be the numeric value which had a 
predetermined correspondence relation. 

[0046] finishing [ the renewal program 523 of lock state reference on the IC chip 104 / a judgment of the 
right or wrong of a lock key ] when the command which requires reference of the lock information 511 
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from the management server 101 or the operating server 105 it is — it is not involved 
lit transmits to content of lock information 511 demand-origin However, this demand will not 
ied if it is not after judging if a lock key is right by the lock key right-or- wrong judging 
22, when the command which requires renewal of the lock information 51 1 is received. 
h if the renewal program 523 of lock state reference is not after judging if a lock key is right by 
ey right-or- wrong judging program 522, when the command which requires the reference or 
f the lock key freeze information 5 12 is received, it will not answer this demand, 
milady, if the renewal program 524 of a lock key on the IC chip 104 is not after judging if a 
s right by the lock key right-or- wrong judging program 522, when the command which 
mewal of a lock key 513 is received, it will not answer this demand. In using a public key pair 
tey, after transmitting the updating demand command of a lock key 513 to the IC chip 104 and 
a response, a lock / lock key processing section 310 enciphers the lock key after updating 
?y) by the old lock key (public key), and transmits to the IC chip 104. The renewal program 
t>ck key is decoded by the old lock key (private key) in which the encryption information 
arough the code decode program 521 is stored by the lock key 513, and transposes a lock key 
new lock key (private key) by which decode was carried out. In using a common key instead 
key pair as a lock key, a lock / lock key processing section 310 enciphers a new lock key 
ey) by the old lock key (common key) similarly, it transmits to the IC chip 104, the 
information which the renewal program 524 of a lock key received is decoded by the old 
common key), and it transposes to the lock key which was able to obtain the lock key 513. 

lock key right-or- wrong judging program 522 has a lock key right-or- wrong judging flag on 
5, and saves the result (positive or no) of a right-or- wrong judging of a lock key. And this lock 
r- wrong judging flag is reset to an initial state (no) at the time of each processing end of 
(unlocking processing) of Step 703, processing (renewal of a lock key) of Step 708, 
I (freezing treatment of a lock key) of Step 711, and processing (lock processing) of Step 716. 
I f demand (1) - (4) ] case, this flag is reset by the state of no by such composition at the time of 
ng end. 

Addition, although the lock key freeze information 512 was formed in the IC chip 104, and 

If a lock key 513 was enabled with the above-mentioned operation gestalt only when the lock 
information 512 was in a lock key freeze release state, the lock key freeze information 512 is 
shed, but when a lock key is right irrespective of the state of the lock information 511, this 
[pan be carried out also in the form which degenerated so that lock key 513 updating might 
t 1 enabled. In this case, a demand becomes three kinds of (1) and (2), (3), or (4), and processing 
L)6, 707,709,710,711, and 714 is excepted. 

lireover, an identification number (ID) like the serial number of the IC chip 104 concerned may 
b the storage 505 of the IC chip 104, the correspondence table of this ID and lock key may be 
p the lock key managed table 308, and the securities 103 which carried the IC chip 104 by the 
and a lock key may be managed. Moreover, if it is used in order to only call the IC chip 104 
jntion under storage or transportation, the management server 101 is able to give and manage 
Sck key for the IC chip 104 of all the securities 103 put under management. Only as for the 
knt server 101 concerned, the securities 103 which carry the IC chip 104 set in the lock state 
mom the theft etc. change into the state of unlocking. 

rif the value which shows the invalid of the lock key 513 beforehand specified specially to the 
llnation 51 1 on the IC chip 104 as a modification about the above-mentioned operation gestalt 
\d it will be made the structure which cannot return to an unlocking state eternally, electronic 
nt processing can be given to the securities of this invention the same with carrying out 
bandonment) processing so that the reuse of the gift certificate after use cannot be carried out, 
e etc. 

at is necessary is just to opt for the function of the program which is the balance of the 
ade of security, and the cost of the IC chip 104, and stores in the hardware of the IC chip 104, 
chip 104, and the IC chip 104 performs since various deformation can be performed in 
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operation of this invention like described above. 

[0053] It is possible to judge from the information on IC chip carried in the securities concerned, to 
perform operating processing justly or to prevent unjust use as mentioned above, without an operating 
server asking a management server the propriety of the execution of operating processing to the 
securities concerned by the online network etc. with this operation gestalt. Moreover, the method of this 
invention is applied, and the reuse can be enabled when the once squeezed securities which cannot be 
used are able to be regained under management of a just management server. 

[0054] Since the propriety of use of the securities concerned can be judged using the information on IC 
chip carried in securities according to this operation gestalt as explained above, it is possible to 
discriminate on that spot whether they are the securities squeezed unjustly, and to prevent unjust use. 



[Translation done.] 
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* NOTICES * 

Japan Patent Office is not responsible for any 
damages caused by the use of this translation. 

l.This document has been translated by computer. So the translation may not reflect the original 
precisely. 

2 **** s hows the word which can not be translated. 
3. In the drawings, any words are not translated. 



DESCRIPTION OF DRAWINGS 



[Brief Description of the Drawings] 

[Drawing 1] It is drawing showing the outline composition of an operation gestalt. 

[Drawing 2] It is drawing explaining the use procedure of the securities which carry IC chip of an 

operation gestalt. 

[Drawing 3] It is drawing showing the outline composition of the management server 101 of an 
operation gestalt. 

[Drawing 4] It is drawing showing the outline composition of the operating server 105 of an operation 
gestalt. 

[Drawing S] It is drawing showing the internal configuration of the IC chip 104 carried in the securities 
103 of an operation gestalt. 

[Drawing 6] It is drawing showing the state transition of the lock information 511 on an operation 
gestalt, and the lock key freeze information 512. 

[Drawing 7 A] It is the flow chart which shows the procedure of the lock / lock key processing section 
310 of the management server 101 of an operation gestalt. 

[Drawing 7 B] It is the flow chart (continuation) which shows the procedure of the lock / lock key 
processing section 310 of the management server 101 of an operation gestalt. 
[Description of Notations] 

101 [ -- IC chip, 105 / — An operating server, 308 / — A lock key managed table, 310 / — A lock / lock 
key processing section, 511 / — Lock information, 512/-- Lock key freeze information, 513 / — Lock 
key ] — A management server, 103 — Securities, 104 



[Translation done.] 
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